Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
- Serve as the primary interface for external researchers and platforms such as HackerOne
- Lead triage and technical validation of reports from HackerOne, Bugzilla, email, and other intake channels
- Drive end-to-end vulnerability remediation with engineering teams
- Identify root causes and systemic issues and influence improvements to secure development practices
- Collaborate with the Security Incident Response Team on active incidents and post-incident reviews
- Perform targeted JavaScript and Python code reviews during investigations and high-risk changes
- Develop or leverage tooling to improve triage efficiency, signal quality, and program insights
Requirements
- At least 3 years of demonstrated experience in a security engineering role
- Experience operating, enhancing, automating, and scaling bug bounty programs and/or experience as a bug hunter
- Practical experience with modern cloud technologies such as Amazon Web Services, Google Cloud Platform, Heroku, or Microsoft Azure
- Experience analyzing code and systems from vulnerability discovery through root cause and prevention
- Real-world software development and/or engineering operations experience
- Ability to develop tools in programming languages such as Python, Go, Rust, or JavaScript is a plus
- Strong communication, collaboration, problem-solving, and cross-functional influence skills
- Formal credentials are valued, but real-world experience, curiosity, passion, and a growth mindset are emphasized
Benefits
- Performance-based bonus plans for eligible employees
- Medical, dental, and vision coverage
- Retirement contributions with 100% immediate vesting
- Quarterly company wellness days
- Country-specific holidays and a birthday day off
- One-time home office stipend
- Annual professional development budget
- Quarterly well-being stipend
- Paid parental leave
- Employee referral bonus program
- Additional benefits such as life/AD&D, disability, and EAP, varying by country
- Remote role, as indicated by the #LI-REMOTE designation
Tech Stack
Categories
About Mozilla
A lot of companies say they’re “mission-driven.” Our unique corporate structure guarantees that every decision we make upholds our mission: to ensure the internet remains open and accessible. Beholden to neither shareholders nor investors, Mozilla Corporation is wholly owned by the not-for-profit Mozilla Foundation. Along with our communities of 20,000+ contributors and collaborators, Mozilla Corporation’s staff designs, builds, and distributes software that allows people to enjoy the internet on their own terms. Our flagship product — the Firefox browser — has expanded into a family of products that protects users and alerts them of risks, safeguards passwords and provides a secure VPN (with more to come). By maintaining a safe, open internet we're helping humanity, while also helping the individual humans employed here to reach their personal and professional goals. With a relatively small team serving hundreds of millions of people, a culture of exploration, and a commitment to mentorship, opportunities abound to learn and grow at Mozilla.